Permissions in a Multi-Location AI: What Each Role Should See

A franchise AI that answers from company data needs permissions at three levels: the brand, the location and the individual user. The risk is not that an assistant gives a wrong answer. The risk is that it gives a right answer to the wrong person: another location's numbers, an executive's private chat, a document that was never meant for the field. Permissions decide who can ask what, and they should be settled before rollout.

Why this matters more in a multi-location network

A single-company assistant has a simple question to answer: which employees may see which documents. A franchise network has more layers. Corporate holds brand knowledge that should reach every location. Each location holds its own operating data. Franchisees, managers and staff within a location need different levels of access. Coaches and area representatives cross several locations but not all of them.

An assistant that treats all of this as one pool of text will, sooner or later, answer someone from material they were never meant to see.

Three levels of scope

Brand. Corporate memory: the manual, standards, approved training, official announcements. This is shared across the network and is the safest ground for an assistant to answer from.

Location. Material that belongs to one unit: its team conversations, its documents, its local performance. A location manager should be able to ask the assistant about their own location and get a complete answer. They should not be able to reach the next location's equivalent.

User. Private conversations and individual documents. A direct message between two people, or an executive's working notes, should stay out of reach of an assistant answering someone else's question, however relevant the content might be.

Each level has a different owner and a different rule. Getting them to work together is what separates a governed assistant from a general one.

What goes wrong without them

• A franchisee asks a routine question and the answer includes figures from another franchisee's location.
• A new manager asks about a policy and receives a summary drawn from a private corporate discussion about it.
• A coach asks about a pattern across the network and sees detail that their role was never meant to include.

None of these needs bad intent or a hacker. They need an assistant that can read more than the person asking is allowed to.

The link to trade secrets

Franchisees already use free AI tools. When they paste operating material into those tools, it leaves the brand's control entirely, and there is no permission model at all. A private AI environment replaces that habit with an assistant that answers from the brand's own approved material, scoped to the person asking, with sources cited. Permissions are what make the replacement credible. If the workspace shares too much, franchisees and corporate teams will not trust it, and the free tools win by default.

Four questions to put to any vendor

1. Where is the permission applied? Ask whether access is checked before the assistant reads material to answer a question, or only afterward when displaying the result. The first is the safer design.
2. Can scope follow the org chart? Brand, location and user levels should map to how your network is actually structured, including coaches and area representatives who span locations.
3. Are answers cited? If every answer names its source, a reviewer can see whether the assistant drew from something it should not have.
4. What happens to private conversations? Ask directly whether direct messages and executive material can ever appear in another person's answer.

Getting started

Before rollout, write down who should see what in plain language. Corporate: everything it owns. Coach: the locations they serve. Location manager: their own location plus the brand layer. Staff: the brand layer plus what their manager shares. If you cannot write the rules in a page, the tool will not be able to enforce them either. The franchise AI readiness checklist covers the other questions worth settling before rollout.

Cozee is a governed AI workspace for franchise networks. Answers come from approved brand material, scoped by role and location, with sources cited. Learn more at cozeeai.com.